zara-coding: validate worktree HEAD object IDs before projecting evidence #190

New issue

Closed

opened 2026-09-08 02:03:11 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:11 +00:00

Owner

Advances #1.

RepositoryInspector._normalize_worktree_record() currently requires the porcelain HEAD field to be non-empty but does not validate it as a full Git object ID. Malformed Git/mock output can therefore enter structured worktree evidence and later symbolic verification.

Acceptance:

deterministic RED for malformed worktree HEAD object IDs;
accept both 40- and 64-hex Git object IDs;
fail with bounded CodingError tied to malformed worktree object identity;
preserve allowed-root confinement, branch/detached/lock/prunable semantics and inventory bounds;
focused tests, registry compatibility, full nix flake check, generated package builds, exact-head protected merge.

Advances #1. `RepositoryInspector._normalize_worktree_record()` currently requires the porcelain `HEAD` field to be non-empty but does not validate it as a full Git object ID. Malformed Git/mock output can therefore enter structured worktree evidence and later symbolic verification. Acceptance: - deterministic RED for malformed worktree HEAD object IDs; - accept both 40- and 64-hex Git object IDs; - fail with bounded `CodingError` tied to malformed worktree object identity; - preserve allowed-root confinement, branch/detached/lock/prunable semantics and inventory bounds; - focused tests, registry compatibility, full `nix flake check`, generated package builds, exact-head protected merge.

nsaspy closed this issue

2026-09-08 02:03:11 +00:00